Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9EAB15E00E011EC9E95A659C4F9AE02.roa
File: F9EAB15E00E011EC9E95A659C4F9AE02.roa (raw, json)
Hash identifier: sNllhIUyVNivJWMdAnc2KEqX8EbnDMbedol/T6EIE8U=
Subject key identifier: 92:05:C4:69:D0:C2:83:6E:23:88:9A:DC:B0:55:FB:AD:56:9E:5D:EB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 3B11
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9EAB15E00E011EC9E95A659C4F9AE02.roa
Signing time: Thu 19 Aug 2021 11:31:21 +0000
ROA not before: Thu 19 Aug 2021 11:31:21 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 135709
IP address blocks: 103.71.60.0/23 maxlen: 24
103.71.62.0/23 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15121 (0x3b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 19 11:31:21 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=611e4109-3738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:63:7c:78:de:c5:07:a2:0a:cb:ce:e1:a2:
6b:d2:75:fe:7c:7b:f0:32:0e:a7:45:f6:ab:79:70:
c8:66:82:ad:1f:a5:7f:be:47:13:7d:57:9a:54:0f:
87:cb:4b:be:30:67:d6:7d:8d:16:df:13:68:bf:08:
be:56:b2:da:e9:f1:03:73:6f:9e:e2:bd:01:73:e6:
cf:68:86:34:c2:0c:1b:fc:49:64:40:89:7f:b5:c9:
da:a2:8e:46:3e:a6:52:42:e2:a5:5c:3b:f1:69:56:
9c:2c:81:56:34:35:7f:91:2e:01:8a:f9:08:8e:6d:
53:d7:3c:52:a5:58:7a:bc:a8:b0:d2:74:6a:77:66:
d6:89:45:4c:03:71:d1:a8:13:17:3f:9a:42:46:1f:
2e:5b:0c:4f:f9:58:b2:e2:27:4f:9d:a2:59:0d:f2:
51:3b:95:5a:59:f1:82:34:d2:86:78:dc:8b:5d:d3:
db:5b:24:f1:64:2c:03:db:2f:12:0d:b6:6b:94:ee:
be:bd:86:31:60:5c:56:c2:97:08:76:3f:a5:7e:6f:
02:94:f0:a3:4b:e1:47:8f:63:44:a2:e4:3f:63:50:
86:81:96:fa:88:56:e6:57:16:02:2b:b9:8e:03:d5:
d6:f3:54:a5:59:33:73:e5:18:10:65:8e:97:af:63:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:C4:69:D0:C2:83:6E:23:88:9A:DC:B0:55:FB:AD:56:9E:5D:EB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F9EAB15E00E011EC9E95A659C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:be:9f:e1:f9:77:09:f7:8f:9a:04:4e:4b:30:e6:be:64:b0:
4e:13:75:88:04:98:24:25:59:21:d5:7a:be:e6:0d:b6:c2:b8:
50:a2:ca:63:3b:67:48:4c:b4:0d:d8:cb:31:b9:b0:b4:8f:64:
df:76:55:76:cd:b8:5e:da:34:1a:0d:3c:dd:34:4c:98:16:32:
54:c3:6b:53:04:2e:40:ac:22:ba:c3:cf:7a:d8:1e:dc:75:37:
00:99:7b:dc:7f:a6:48:07:55:7f:3c:c4:91:33:9f:a7:ea:0d:
c4:88:59:00:3d:c9:3a:22:46:22:d0:18:17:7c:83:9e:df:ee:
de:27:bc:97:60:2d:f7:f3:2f:8c:f6:59:6d:af:3b:f7:42:b5:
6a:e2:29:60:21:9a:37:38:2c:14:53:7e:63:10:39:98:da:eb:
9f:4a:29:c6:1d:9f:85:55:65:1f:90:0d:dd:64:88:30:61:99:
2d:02:66:26:51:e7:3b:aa:0a:5f:d3:25:d6:8e:e3:c2:fd:b6:
8a:31:a0:6d:66:28:f7:75:bc:b1:5f:9f:50:3f:b7:aa:28:87:
06:57:60:80:d5:cf:33:54:6c:7f:ce:b0:08:38:49:ff:7c:3c:
2b:7a:49:b5:a4:55:09:36:d4:64:11:b4:66:44:6e:67:ac:3e:
1a:2c:51:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:55 2023 by rpki-client on console-ams.rpki-client.org